fix: close open issues and fold in safe fixes from open PRs

[BIackFIame]

Goal

Final part of the stack. It closes what no other pull request closes, adopts the safe fixes from stalled pull requests that no maintainer ruling excludes, and records the state of every open upstream pull request and issue in one place.

Behavior

• Дополнения #53, date: the HOME clock shows the localized date under the time. The date hides on a tile too short for it.
• Finish or redesign GitHub authorization for plugin discovery #22, plugin showcase: showcase browsing and search work without a GitHub account, following the issue's preferred baseline.
  • Before sign-in starts, the panel explains it: sign-in is optional, requests no extra access, only raises GitHub's search limits, and stores an encrypted local token that can be revoked.
  • A rate-limit error says when to retry.
  • The release workflow warns when CANVASTTY_GITHUB_CLIENT_ID is unset.
  • Whether to keep OAuth at all is still the owner's decision.
• Long answers, from Integrate all open PRs (#32, #34, #35–#37, #41, #46, #50) with conflict resolution and post-merge fixes #51 (76bbaf5): hook stdin is read up to 512 KiB, so a long final answer keeps its turn id and a bounded, surrogate-safe answer. Before this, a Stop payload over 16 KiB was dropped whole.
• Reliability, from feat(app): deny default permissions, recover the renderer, gate hidden output, notify and self-update #35 (be052b2): the default session denies web permissions (the Browser keeps its own partition), a crashed renderer reloads in place, and lost child processes are logged. The secret audit also scans the built out/ bundle and Windows home paths, and runs after release builds. feat(app): deny default permissions, recover the renderer, gate hidden output, notify and self-update #35's updater is not included; feat(updates): add GitHub release updates across platforms #62 covers updates.
• Changelog: an Unreleased section summarizes the whole stack in EN, RU and ZH.

Original authors are credited with Co-authored-by trailers.

Order: open pull requests and issues

Item	State after this stack	Action
#54 #56 #57 #59 #60	Merge cleanly with the stack	Nothing needed
#58	Same goal as this stack's settings store; #58's tests pass against it	Take the stack's side when resolving
#61	Mechanical conflicts	Resolution in the integration branch
#55	Its grant must also reach prepared first starts	Fix and test in the integration branch
#62	Four follow-ups needed when both land	Fix in the integration branch
#35	Reliability and audit parts taken here	Updater superseded by #62; maintainer's update review stays with #62
#51	Hook payload fix taken here	Browser cards, the second orchestration gateway and the duplicate updater stay out (maintainer ruling on #51)
#32	Not taken	The stack's orchestration MCP covers every provider over the agent bridge (see its ADR)
#36, #37	Not taken	Maintainer requires rename coherence, a cross-OS shortcut matrix, and attention-panel settings, placement and UX with visible-window evidence, before these come through any PR
#41, #46	Not taken	Excluded by the maintainer
Closed #4 #5 #16 #23 #26 #34 #38–#45	Already integrated (#17, #27–#31, #47, #48) or rejected	Nothing left to take
Issue #53	Date done here	Phone remote control and files on the canvas are product decisions. An OMP status needs a verified omp acp run first.
Issue #22	Anonymous baseline done here	Owner decides whether OAuth stays
Issue #14	Not touched	Browser behaviour is frozen by the maintainer. The remaining overlap with resize handles (inherited from #40) and with fixed overlays such as toasts needs its own browser proposal.

Follow-up #62 needs once both land:

• the restore after a failed update must clear shuttingDown;
• restore only live sessions, with the orphan rule;
• refuse to install while a server is being prepared or a capsule test runs;
• open About through SettingsLocation.

Series

Each part is one commit on top of the previous one. Please merge them in order. Until #69 is merged, GitHub also shows the earlier parts here; review only the top commit 3b3674a (Commits tab → last commit).

Part	PR	Scope	Lines
1	#63	Providers: Cursor, MiniMax Code, Devin, Antigravity	+579/−90
2	#64	API keys, API profiles, agent delegation (MCP)	+4275/−63
3	#65	Remote servers, placement, privacy tiers, accounts	+6620/−40
4	#66	Isolation: capsules, worktrees, containers	+5508/−839
5	#67	ACP, connection settings, remote containers	+6827/−563
6	#68	Project context and learning	+6148/−370
7	#69	Routing, reasoning effort, server preparation, sign-in	+3122/−467
8	#70	Open issues and safe fixes from open PRs	+306/−58

Compatibility with open upstream PRs

integration/stack-with-open-prs is this whole stack with #54–#62 merged on top and every conflict resolved. On that branch both TypeScript checks, 1492/1492 tests, npm run test:even (47/47) and electron-vite build pass.

• fix(even-g2): isolate transport keys per paired device #54, fix(even-g2): align local-network Settings card layout #56, fix(canvas): honor region bounds when snapping resize #57, fix(canvas): let sticky note editors scroll their own text #59, fix(plugins): prevent stale version writes during updates #60 merge cleanly.
• fix(settings): keep rejected writes out of live settings #58: conflicts in SettingsStore.ts. Keep this stack's store: it already serializes every write and publishes a value only after the disk write succeeds. fix(settings): keep rejected writes out of live settings #58's new tests pass against it unchanged.
• fix(window): restore state events after macOS Dock reopen #61: mechanical. registerIpc returns the window observer; keep both sides. This stack's IPC tests stub both window-state helpers, so they pass in either merge order.
• fix(even-g2): require explicit grant for answer capture #55:
  • TerminalManager.ts: keep this stack's launch structure. The answer-capture grant must also reach the prepared and measured-grid first start, because every real agent launch goes through that path.
  • hook-helper.mjs: keep this stack's 512 KiB input read and safe cut, and gate the answer on fix(even-g2): require explicit grant for answer capture #55's grant.
  • Fix and tests: 64ef294 (grant through prepared starts, feat(updates): add GitHub release updates across platforms #62 follow-ups) and c2dd726 (hook test under the grant).
• feat(updates): add GitHub release updates across platforms #62: whichever of this stack and feat(updates): add GitHub release updates across platforms #62 lands second needs the same commit:
  • The restore step in shutdownForUpdate must clear shuttingDown. Otherwise no session can start after a failed update; feat(updates): add GitHub release updates across platforms #62's own test fails without this.
  • Restore only live sessions, using the orphan-subagent rule.
  • Refuse to install while a server is being prepared or a capsule test runs.
  • Open About through SettingsLocation.

I will rebase this stack onto whichever of these lands first.

Verification

• Both TypeScript checks, 1453/1453 tests, npm run test:even (47/47), npm run build and npm run audit:secrets pass. The audit covers both the source tree and the built bundle.
• Each fix has a regression test that fails without it: the long-answer hook and the rate-limit message.
• Checked live in the real app, in an off-screen window:
  • the clock shows «ср, 23 сентября 2026 г.»;
  • with no GitHub sign-in, the showcase opened and loaded 3 plugins from GitHub;
  • notification and geolocation requests were denied;
  • after a forced renderer crash, the interface and its API came back.

🤖 Generated with Claude Code